last executing test programs: 12m18.769798056s ago: executing program 32 (id=1093): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x9) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$sysctl(r1, &(0x7f0000000100)='7\x00', 0x2) 12m16.503042648s ago: executing program 33 (id=1110): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000280)=0x80) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 12m13.420843286s ago: executing program 34 (id=1132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x941c}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c880}, 0xc096) 11m29.252949763s ago: executing program 35 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 10m44.740816603s ago: executing program 36 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000012c0)=""/156, 0x9c}, {&(0x7f0000001380)=""/132, 0x84}, {&(0x7f0000001540)=""/119, 0x77}, {&(0x7f00000015c0)=""/234, 0xea}], 0x7}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0xc}], 0x2, 0x100, 0x0) 10m43.584776321s ago: executing program 37 (id=1527): syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) epoll_create1(0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) pipe(0x0) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="020000ffffffba000040000086dd075efdd14913f7c5c65ab219c2bae0937c3acd3eba0b2e68d17e76cdacdf1d5618ae7fa9932afb0506279f820dcc0fa42d69fa00000000000000000000000000000000d6bd1c80074e4f97464339657225eb2c2ee21ab8742e4f860a6c219bfbbc8973d02a21d751d30cda84274a908f", 0x7e, 0x0, &(0x7f0000000000)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 10m38.418678069s ago: executing program 38 (id=1550): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x138, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff1}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0xe4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xd0, 0x6, [@m_sample={0x90, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x60}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x6, 0x3e360fc481fbc0f, 0x1, 0xfeb7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x5, 0x10000000, 0xffffff80, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10m32.88558082s ago: executing program 39 (id=1563): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 10m31.33528092s ago: executing program 40 (id=1572): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r2, 0x1}, 0x8) 10m31.048531079s ago: executing program 7 (id=1574): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB="ef3ef0c23683a9582d18944a1e2fcc21bd7f0512bef3e04b71c9d70c26"], 0x1, 0x58b4, &(0x7f0000005980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, &(0x7f0000000500)='acl') 10m30.408097182s ago: executing program 7 (id=1575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000280)="7477b3ac", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 10m30.308318802s ago: executing program 7 (id=1576): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000003c0)=@req={0xfffffffa, 0x8, 0x4, 0x3}, 0x10) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file6\x00', 0x2003048, &(0x7f00000002c0)=ANY=[], 0x0, 0xaab, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}}, 0x0) 10m29.859051484s ago: executing program 7 (id=1577): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x152) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, 0x0, 0x0) 10m29.76674168s ago: executing program 7 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r1, 0x1, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m29.330553167s ago: executing program 7 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x58}, 0x40) 10m29.110164738s ago: executing program 41 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x58}, 0x40) 10m6.780590596s ago: executing program 2 (id=1614): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004011, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 10m5.604642857s ago: executing program 2 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) 10m4.670337869s ago: executing program 2 (id=1621): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x800000000000000, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$tcp_congestion(r2, 0x0, 0x0) 10m2.22492138s ago: executing program 2 (id=1624): syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) poll(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000019640)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000019400)="8546cfd834f691a10161e8f3ed4d4c1478f3675dbf3bd0411cfdf05f62653c2d94ff75d77929cbd6e319ce6fc224cd2000d977ee0d8493c9232ab860633bb00b470570409f00f56d3f5bfa1585e35d6d7de5e09173b3234b59060a29993badcf1c992a93916b235032963604f5444d26665194181526a6960093302025216979416827585c6af951db3798f273fe6ded1736e0cea2db", 0x96}, {&(0x7f00000194c0)="5114614962a4a3469dab3298521d072d71c5f5edf917e14803fb72f49d5398570d95f12898bde88c3191137179f117eac2d414a6fe536236f7cb9c0f43b2f93e56912c43e132831e72688cb859da9cede86956ee4c1f60560547a2b8beda076a456ddeb2dad05bb1322b2e94f5d94c37027b06a675e68ec3e0f19b0d77950f73dfc190bcb07b2336408f775dfaf8ed95e19b579bbc508cc068f13a9e3cd5dff57b01fbe096d446", 0xa7}, {0x0}, {&(0x7f0000000180)="d6ed270fcd", 0x5}], 0x4, &(0x7f0000000280)=[@flowinfo={{0x14}}], 0x18}}], 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102382, 0x19040) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x9, 0x5, 0xf8f, 0x8}, 0x10) unshare(0x2040400) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x15) r4 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xd, @pix_mp={0x9, 0x890, 0x30314442, 0x6, 0xa, [{0x1, 0x3}, {0x81, 0x101}, {0xa104, 0x6}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x2}, {0x6}, {0x100, 0xfff}], 0x5, 0x7, 0x4, 0x1}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000002060500000000000000000000000000e567cf2ef8840fd6aa3574677c119d41b7b5dd5951e3a494e6000f3341ca156f2477e58ad3c8f921ec3e126d0892ca2d2d0077d665c25446a66c6f587bba83b73b7c9f0bcbe28099979e5355bed3f0c1950b30292ec9636f2f9c45a09964eedcc1c543582636af0f038adfeb5bfb9f34564e38966be2bbcef1d3a5f677"], 0x1c}}, 0x0) 9m59.87288458s ago: executing program 2 (id=1636): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x1, 0x0) 9m58.343884459s ago: executing program 2 (id=1641): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004011, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 9m42.681547502s ago: executing program 42 (id=1641): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004011, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 8m8.201464166s ago: executing program 0 (id=1898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x264, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x238, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_LINK={0x8, 0x3, 0x200}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x210, 0x7, [@m_mirred={0xf8, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0x58, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0x69, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82ff"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x50, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x25, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5aa400010000000000000000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x60, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x21, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f1"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x34, 0x9, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x1}, 0x6004800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 8m7.900936429s ago: executing program 0 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m6.217089529s ago: executing program 0 (id=1906): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000100)='./control\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip_mr_cache\x00') read$FUSE(r2, &(0x7f0000002d80)={0x2020}, 0x2025) syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e23, 0x380000, @loopback, 0x8}, 0x1c) close(0x3) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) io_setup(0x42fe, &(0x7f00000008c0)) eventfd2(0x2, 0x1) 8m0.442569075s ago: executing program 0 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) chdir(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r4, 0x5760, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0x4) 7m59.076543189s ago: executing program 0 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x1, 0x8, 0x4, 0x20810, 0xffffffffffffffff, 0xa2, '\x00', 0x0, r1, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x18, r5, 0x9, 0x400010000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', 0x0}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r7, 0x0, r7, &(0x7f00000004c0)=0xdc, 0xfffffffffffffff8, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_loaded', 0x101600, 0x8) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) fstat(r8, &(0x7f00000022c0)) rseq(0xfffffffffffffffd, 0x41, 0x0, 0x0) 7m53.860887381s ago: executing program 0 (id=1927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x4, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x8000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$isdn(0x22, 0x3, 0x22) r2 = socket$netlink(0x10, 0x3, 0x14) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) unshare(0x28000800) syz_open_procfs(0x0, 0x0) 7m38.636114711s ago: executing program 43 (id=1927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x4, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="aa", 0x1, 0x20000000, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x8000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$isdn(0x22, 0x3, 0x22) r2 = socket$netlink(0x10, 0x3, 0x14) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) unshare(0x28000800) syz_open_procfs(0x0, 0x0) 7m14.333546203s ago: executing program 9 (id=2007): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x9}, {0xffe0, 0xf}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00001700000000000c001a"], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m14.058710829s ago: executing program 9 (id=2008): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f00000010c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca7f9c1f64e6cf9b99007778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed98c667519043f157a8a5b984e0b9d5ff9b391c1dec077b5099cf9aecd1a9d94", 0xd6}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f4", 0xab}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546cd24ff6d573", 0x69}, {0x0}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed010000000000000007aab6dc2d3668aa974f67dad537a2d75fcac54500000000000000000000000000000000d70f7cae577664b818df8e", 0x55}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7m13.752777678s ago: executing program 9 (id=2010): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/1069], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 7m11.034131603s ago: executing program 9 (id=2013): iopl(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(0x0, 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x1]}}, 0x5c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xc, 0x3ea1, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x0, 0x400000, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 7m8.941884574s ago: executing program 9 (id=2015): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000007c0)="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", 0xdfe}, {&(0x7f0000000040)="cd57976e", 0x4}], 0x2) 7m7.592934467s ago: executing program 9 (id=2020): ioperm(0x0, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x4}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xfd, 0x9}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xc}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x24044014) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r3 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) syz_open_dev$vcsu(&(0x7f00000003c0), 0x0, 0x4e2c2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100050, 0xffffffffffffffff, 0x7f69c000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x190, 0x0, 0x190, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x88}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 6m52.272073378s ago: executing program 44 (id=2020): ioperm(0x0, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x4}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xfd, 0x9}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xc}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x24044014) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r3 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) syz_open_dev$vcsu(&(0x7f00000003c0), 0x0, 0x4e2c2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x100050, 0xffffffffffffffff, 0x7f69c000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x190, 0x0, 0x190, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x88}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 26.663716022s ago: executing program 3 (id=2844): socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) 26.505304676s ago: executing program 3 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.576046558s ago: executing program 8 (id=2852): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 18.543028851s ago: executing program 8 (id=2859): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 18.496674451s ago: executing program 5 (id=2860): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x4040845) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x43, 0x0, @tick=0x2f, {0x1}, {0x8}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {0x4}, @ext={0x0, 0x0}}], 0x38) 18.333284344s ago: executing program 3 (id=2861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400), 0x4) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) 16.041247967s ago: executing program 5 (id=2866): syz_usb_connect(0x2, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x1, 0xe4, 0x41, 0x20, 0x4b8, 0x202, 0x33b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x61, 0x10, 0x7, [{{0x9, 0x4, 0xad, 0x6, 0x0, 0xe, 0xfa, 0xf0, 0xff}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 13.603025194s ago: executing program 8 (id=2870): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010102, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x8b6}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x91}, {}, {0xb}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xff, 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r5 = socket$unix(0x1, 0x2, 0x0) splice(r4, &(0x7f00000005c0)=0xfffffffffffffff8, r5, &(0x7f00000007c0)=0x1, 0x7fffffff, 0x0) 13.553283793s ago: executing program 4 (id=2872): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f00000010c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca7f9c1f64e6cf9b99007778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed98c667519043f157a8a5b984e0b9d5ff9b391c1dec077b5099cf9aecd1a9d94", 0xd6}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9eb", 0x9c}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546cd24ff6d573", 0x69}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b3", 0x79}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed010000000000000007aab6dc2d3668aa974f67dad537a2d75fcac54500000000000000000000000000000000d70f7cae577664b818df8e", 0x55}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 13.19332945s ago: executing program 4 (id=2874): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x9, 0x0, [0x0], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3fb, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r5, 0x4000, 0x0, 0x5, 0x0, [], [], [], [0x0, 0x8]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 12.923603374s ago: executing program 5 (id=2875): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0xfffffff4}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}]}, 0x48}}, 0x0) 12.723080564s ago: executing program 5 (id=2876): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 12.281723442s ago: executing program 8 (id=2877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 12.184117365s ago: executing program 4 (id=2878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$urandom(0xffffffffffffff9c, 0x0, 0x8100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 9.864162404s ago: executing program 4 (id=2879): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x582}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001900)="90971eff1c3e", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)="a4232f", 0x3}], 0x1}}], 0x3, 0x40004) shutdown(r0, 0x1) 9.740368254s ago: executing program 3 (id=2880): syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) 9.462278633s ago: executing program 4 (id=2881): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=@random={'os2.', '[-.^\x00'}, &(0x7f0000000400)=""/67, 0x43) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) 9.364909562s ago: executing program 5 (id=2882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x82) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x7, "0a43b81781ee52fe5d1318dedf595fea476cc6aab722e8ac16406f5b4c42cc1b", 0x2, 0x1, 0x3ff, 0x7, 0x11, 0x1, 0x3ff, 0x7}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0xd14, 0xfff, 0xe}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) ptrace$cont(0x1f, r5, 0x100, 0x4) r10 = msgget$private(0x0, 0x0) msgsnd(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="ef"], 0xe, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 9.282715659s ago: executing program 1 (id=2883): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x2000c800) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x12) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000280)={0x1, 0x102, 0x8, {0x7, 0x8, 0x2, 0x90000}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, 0x0, 0x0, 0xff00) inotify_init1(0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 9.202653583s ago: executing program 8 (id=2884): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0xb2, &(0x7f00000002c0)={0x5, 0xf, 0xb2, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x53, 0xd, 0x2}, @generic={0x89, 0x10, 0x2, "5b2e875e8ca4f6d7a9a7dccbcf05f3a9182938df19d9520ef2ec7cbf82d66d433be6e798756d9f8492dc4459fc43cbed5f613ba105611477a80bd2d622322ee33f5ca8b3f7c5642dd043601f11ca1ddde363e8eba1198e53c9f76b9751c8b993b108c7bf8ce3384e394249e723814a294d6d4e7c2d413de9604a8497d3785c55bf3a874d6c2a"}, @generic={0x1a, 0x10, 0x1, "f78b31be69ff6b5cef4c6a4bf73c4190d3a711f710ff18"}]}}) 8.479788932s ago: executing program 1 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7.894673244s ago: executing program 3 (id=2886): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x1]}}, 0x5c) 7.827190563s ago: executing program 4 (id=2887): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59", 0x4f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 6.367668098s ago: executing program 3 (id=2888): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) epoll_create1(0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 6.367369267s ago: executing program 1 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x44000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000080)={0x18, r4}) 5.928238873s ago: executing program 5 (id=2890): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010102, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x8b6}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x91}, {}, {0xb}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xff, 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r5 = socket$unix(0x1, 0x2, 0x0) splice(r4, &(0x7f00000005c0)=0xfffffffffffffff8, r5, &(0x7f00000007c0)=0x1, 0x7fffffff, 0x0) 4.72280138s ago: executing program 1 (id=2891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x840) 4.620956711s ago: executing program 8 (id=2892): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=@random={'os2.', '[-.^\x00'}, &(0x7f0000000400)=""/67, 0x43) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) 4.502824769s ago: executing program 6 (id=2893): socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0xb, 0x9, 0x0, @local}, 0x10) mmap(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x5, 0x42010, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) dup3(r4, r5, 0x0) 4.439000604s ago: executing program 1 (id=2894): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x582}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001900)="90971eff1c3e", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)="a4232f", 0x3}], 0x1}}], 0x3, 0x40004) shutdown(r0, 0x1) 2.851887953s ago: executing program 6 (id=2895): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0xb, 0x9, 0x0, @local}, 0x10) mmap(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x5, 0x42010, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) dup3(r4, r5, 0x0) 2.770789305s ago: executing program 1 (id=2896): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d000000"], 0x0) 1.305344098s ago: executing program 6 (id=2897): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x2000c800) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x12) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000280)={0x1, 0x102, 0x8, {0x7, 0x8, 0x2, 0x90000}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, 0x0, 0x0, 0xff00) inotify_init1(0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 212.533809ms ago: executing program 6 (id=2898): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="94", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0) 116.832685ms ago: executing program 6 (id=2899): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1}, &(0x7f0000000280), &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) close(r0) syz_io_uring_setup(0x10ef, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x3, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000140)) 0s ago: executing program 6 (id=2900): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) epoll_create1(0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): HSR network [ 550.755887][ T3502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.789677][T12555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.911070][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.945183][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.965384][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.022608][ T5852] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 551.029739][ T5895] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 551.029772][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.062750][ T5895] usb 2-1: config 0 descriptor?? [ 551.279320][ T5852] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 551.304831][ T5852] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 551.537930][ T5895] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 552.600956][ T5895] acrux 0003:1A34:0802.0003: no inputs found [ 552.606979][ T5895] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 552.912882][ T5852] usb 5-1: USB disconnect, device number 21 [ 552.988317][ T5852] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 553.003861][T12555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.188559][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 553.494151][T12910] loop4: detected capacity change from 0 to 128 [ 553.556043][T12910] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 553.613116][T12910] sysv_free_block: trying to free block not in datazone [ 553.662921][T12910] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 553.733098][T12914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2033'. [ 553.742180][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'. [ 554.331203][ T5892] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 554.749567][ T5897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.511250][ T5895] usb 2-1: USB disconnect, device number 6 [ 556.640572][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.027968][T12555] veth0_vlan: entered promiscuous mode [ 558.109001][T12555] veth1_vlan: entered promiscuous mode [ 558.162281][ T5852] ftdi_sio 5-1:0.0: device disconnected [ 558.365593][T12555] veth0_macvtap: entered promiscuous mode [ 558.421148][T12555] veth1_macvtap: entered promiscuous mode [ 558.513021][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.558601][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.581678][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.596675][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.608352][T12955] netlink: 'syz.5.2042': attribute type 1 has an invalid length. [ 558.639361][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.652476][ T5852] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 558.666607][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2042'. [ 558.680926][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.727198][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.776544][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.800226][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.825543][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.842790][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.866646][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.879321][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 558.891222][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.923648][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.954682][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.970164][ T5852] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 558.977467][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.000360][T12555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.024412][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.085611][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.111635][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.121378][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.149030][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.149276][ T5852] usb 5-1: Product: syz [ 559.161416][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.174709][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.185992][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.194723][ T5852] usb 5-1: Manufacturer: syz [ 559.684786][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.701385][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.780228][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.790337][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.824809][ T5852] usb 5-1: SerialNumber: syz [ 559.826830][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.844472][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.856427][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.868753][T12555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.869771][ T5852] usb 5-1: config 0 descriptor?? [ 559.879381][T12555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.898652][T12555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.923084][T12555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.941523][T12555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.977209][T12957] netlink: 'syz.5.2042': attribute type 1 has an invalid length. [ 559.977215][T12555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.045413][T12555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.046588][ T5852] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 560.070270][T12957] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2042'. [ 560.336318][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 560.336338][ T29] audit: type=1326 audit(1737534172.279:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 560.376593][ T5852] usb 5-1: Detected FT-X [ 560.400982][T10127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.512088][ T5852] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 560.516127][T10127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.532125][ T29] audit: type=1326 audit(1737534172.289:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 560.989315][ T29] audit: type=1326 audit(1737534172.369:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 561.187537][ T5852] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 561.215014][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.243973][ T5852] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 561.274470][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.297477][ T29] audit: type=1326 audit(1737534172.369:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 561.298213][ T5852] usb 5-1: USB disconnect, device number 22 [ 561.484857][ T29] audit: type=1326 audit(1737534172.369:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 561.490770][ T5852] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 561.623307][ T29] audit: type=1326 audit(1737534172.369:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 561.676602][ T5852] ftdi_sio 5-1:0.0: device disconnected [ 562.860578][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.119514][ T29] audit: type=1326 audit(1737534172.369:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 563.467770][ T29] audit: type=1326 audit(1737534172.369:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 563.554745][ T29] audit: type=1326 audit(1737534172.379:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 563.667160][ T29] audit: type=1326 audit(1737534172.379:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12971 comm="syz.5.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1b785d29 code=0x7ffc0000 [ 563.873941][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.484419][T13017] netlink: 'syz.5.2054': attribute type 1 has an invalid length. [ 565.536977][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.548095][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.591835][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.602783][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2054'. [ 566.546008][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.862429][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 566.862481][ T29] audit: type=1800 audit(1737534178.609:72): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2056" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 567.525308][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 567.537321][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.941468][T13024] netlink: 'syz.5.2054': attribute type 1 has an invalid length. [ 567.950913][T13024] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2054'. [ 569.770800][ T5849] Bluetooth: hci5: command tx timeout [ 570.072899][T10127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.628942][T10124] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.168812][T13072] Cannot find set identified by id 0 to match [ 571.774167][T10124] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.830749][ T5849] Bluetooth: hci5: command tx timeout [ 572.214865][T13082] Cannot find set identified by id 0 to match [ 572.706089][T10124] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.465510][T13085] loop3: detected capacity change from 0 to 128 [ 573.476729][T13085] hpfs: Bad magic ... probably not HPFS [ 573.514135][T10124] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.911723][ T5840] Bluetooth: hci5: command tx timeout [ 574.480439][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.137275][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.549329][ T5840] Bluetooth: hci5: command tx timeout [ 577.086145][T13020] chnl_net:caif_netlink_parms(): no params data found [ 577.296724][T10124] bridge_slave_1: left allmulticast mode [ 577.322446][T10124] bridge_slave_1: left promiscuous mode [ 577.404133][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.504598][T10124] bridge_slave_0: left allmulticast mode [ 577.528949][T13151] random: crng reseeded on system resumption [ 577.535093][T10124] bridge_slave_0: left promiscuous mode [ 577.558232][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.590099][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.692849][T13171] loop4: detected capacity change from 0 to 128 [ 581.767586][T13171] hpfs: Bad magic ... probably not HPFS [ 581.858157][T10124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.884900][T10124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.908563][T10124] bond0 (unregistering): Released all slaves [ 583.757279][T10124] hsr_slave_0: left promiscuous mode [ 583.794635][T10124] hsr_slave_1: left promiscuous mode [ 583.880521][T10124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.941939][T13196] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 583.957342][T10124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.976612][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 584.015152][T10124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.033095][T10124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.141254][T10124] veth1_macvtap: left promiscuous mode [ 584.159294][T10124] veth0_macvtap: left promiscuous mode [ 584.164895][T10124] veth1_vlan: left promiscuous mode [ 584.202269][T10124] veth0_vlan: left promiscuous mode [ 586.665211][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.690171][T13223] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2099'. [ 587.171166][T10124] team0 (unregistering): Port device team_slave_1 removed [ 587.210823][T10124] team0 (unregistering): Port device team_slave_0 removed [ 587.613607][T13020] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.620961][T13020] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.628097][T13020] bridge_slave_0: entered allmulticast mode [ 587.638612][T13020] bridge_slave_0: entered promiscuous mode [ 587.648381][T13197] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 587.669633][T13218] bridge0: port 3(erspan0) entered blocking state [ 587.685110][T13197] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2092'. [ 587.694687][T13218] bridge0: port 3(erspan0) entered disabled state [ 587.731502][T13218] erspan0: entered allmulticast mode [ 587.760034][T13218] erspan0: entered promiscuous mode [ 587.776825][T13218] bridge0: port 3(erspan0) entered blocking state [ 587.783316][T13218] bridge0: port 3(erspan0) entered forwarding state [ 588.384459][T13020] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.395078][T13020] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.445027][T13020] bridge_slave_1: entered allmulticast mode [ 588.463755][T13020] bridge_slave_1: entered promiscuous mode [ 589.179386][T13236] loop5: detected capacity change from 0 to 2048 [ 589.245834][T13020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.312119][T13020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.317559][T13242] loop6: detected capacity change from 0 to 764 [ 589.602654][T13242] rock: directory entry would overflow storage [ 589.608855][T13242] rock: sig=0x4f50, size=4, remaining=3 [ 589.614447][T13242] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 592.055604][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2111'. [ 592.115371][T13020] team0: Port device team_slave_0 added [ 592.182962][T13020] team0: Port device team_slave_1 added [ 592.250346][T13269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2113'. [ 592.510814][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.666642][T13273] loop5: detected capacity change from 0 to 64 [ 592.674724][T13273] BFS-fs: bfs_fill_super(): Impossible last inode number 49807519 > 513 on loop5 [ 593.749677][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.771419][T13020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.778376][T13020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.955466][T13287] loop4: detected capacity change from 0 to 2048 [ 593.966813][T13020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.994863][T13020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.016155][T13020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.125993][T13020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.164620][T13271] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 594.206034][T13271] macvlan2: entered allmulticast mode [ 594.225070][T13271] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 594.340771][T13271] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 594.679485][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 595.911104][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 595.940316][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 596.179519][ T5892] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 596.187646][ T5892] usb 6-1: config 0 has no interface number 0 [ 596.219333][ T5892] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 596.239938][ T5892] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 596.272374][ T5892] usb 6-1: config 0 interface 88 has no altsetting 0 [ 596.341182][ T5892] usb 6-1: string descriptor 0 read error: -22 [ 596.347398][ T5892] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 596.409291][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 596.500144][ T5892] usb 6-1: config 0 descriptor?? [ 596.514567][T13020] hsr_slave_0: entered promiscuous mode [ 596.524407][ T5892] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input14 [ 596.621321][T13020] hsr_slave_1: entered promiscuous mode [ 596.657410][T13020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.687558][T13020] Cannot create hsr debugfs directory [ 596.778209][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2125'. [ 597.630400][T10552] udevd[10552]: Error opening device "/dev/input/event4": Input/output error [ 597.656346][T10552] udevd[10552]: Unable to EVIOCGABS device "/dev/input/event4" [ 597.714780][T10552] udevd[10552]: Unable to EVIOCGABS device "/dev/input/event4" [ 597.848559][ T5892] usb 6-1: USB disconnect, device number 4 [ 598.282066][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.914106][T13346] loop6: detected capacity change from 0 to 64 [ 601.309611][T13346] BFS-fs: bfs_fill_super(): Impossible last inode number 49807519 > 513 on loop6 [ 603.538859][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.613798][ T9687] udevd[9687]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 603.630523][T13360] loop4: detected capacity change from 0 to 32768 [ 603.632338][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.669008][T13360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2132 (13360) [ 603.688241][T13360] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 603.698559][T13360] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 603.707346][T13360] BTRFS info (device loop4): using free-space-tree [ 604.621917][T10542] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 604.639863][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.837855][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 605.388756][T13411] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 605.418336][T13411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.421619][T13020] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 605.695461][T13020] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 605.742180][T13020] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 607.085696][T13020] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 608.101760][T13426] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 608.101760][T13426] program syz.5.2145 not setting count and/or reply_len properly [ 609.111341][ T3056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.131590][T13433] loop6: detected capacity change from 0 to 64 [ 609.204777][T13433] BFS-fs: bfs_fill_super(): Impossible last inode number 49807519 > 513 on loop6 [ 610.400834][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.536884][T13455] loop4: detected capacity change from 0 to 764 [ 610.729333][ T5894] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 610.830750][T13455] rock: directory entry would overflow storage [ 610.836928][T13455] rock: sig=0x4f50, size=4, remaining=3 [ 610.843114][T13455] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 611.087026][T13020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.145839][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.158325][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 611.196023][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.055535][T13020] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.059780][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.081439][ T5894] usb 4-1: Product: syz [ 612.085617][ T5894] usb 4-1: Manufacturer: syz [ 612.096650][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.103787][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.204862][ T5894] usb 4-1: SerialNumber: syz [ 612.827453][T13457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.837241][T13457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.857566][ T5894] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 612.881044][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.888172][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.913091][ T5894] usb 4-1: USB disconnect, device number 37 [ 613.412181][ T5897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 613.639273][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 613.682561][ T5897] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 613.721263][ T5897] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 613.789269][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.839255][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.922145][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 613.973515][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.026282][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.095761][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.201802][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.045502][T10127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.218753][ T5897] usb 4-1: can't set config #16, error -71 [ 615.240493][ T5897] usb 4-1: USB disconnect, device number 38 [ 615.485685][T13020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.807013][T13521] loop6: detected capacity change from 0 to 764 [ 615.955028][T13526] bond1: entered promiscuous mode [ 615.998700][T13526] bond1: entered allmulticast mode [ 616.080627][T13529] batadv1: entered allmulticast mode [ 616.111006][T13529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 616.120067][T13521] rock: directory entry would overflow storage [ 616.126231][T13521] rock: sig=0x4f50, size=4, remaining=3 [ 616.126938][T13536] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 616.131802][T13521] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 616.133228][T13529] batadv1: entered promiscuous mode [ 616.150001][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.153768][T13529] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 616.667389][T13020] veth0_vlan: entered promiscuous mode [ 616.739828][T13020] veth1_vlan: entered promiscuous mode [ 619.127921][T13560] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 619.214895][T13020] veth0_macvtap: entered promiscuous mode [ 619.338423][T13565] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 619.730390][T13020] veth1_macvtap: entered promiscuous mode [ 620.005025][ T29] audit: type=1800 audit(1737542421.789:73): pid=13581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2175" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 620.590711][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.601425][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.620640][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.633095][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.646240][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.656576][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.667521][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.681774][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.689269][ T5895] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 620.692876][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.710381][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.721212][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.731701][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.742414][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.752443][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.763304][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.773426][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.784775][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.797589][T13020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.859796][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.881106][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 620.920620][ T5895] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 620.949410][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.957500][ T5895] usb 7-1: Product: syz [ 620.989292][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.013564][ T5895] usb 7-1: Manufacturer: syz [ 621.018183][ T5895] usb 7-1: SerialNumber: syz [ 621.039350][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.054408][ T5895] usb 7-1: config 0 descriptor?? [ 621.075969][ T5895] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 621.076418][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.104615][ T5895] usb 7-1: Detected FT-X [ 621.139636][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.157746][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.229052][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.351520][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.356637][ T5895] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 621.377932][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.460212][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.686593][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.808776][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.819970][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.832079][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.863559][ T5895] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 621.904483][ T5895] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 621.921778][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.969646][ T5895] usb 7-1: USB disconnect, device number 7 [ 621.979369][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.020391][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 622.042905][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.075232][ T5895] ftdi_sio 7-1:0.0: device disconnected [ 622.088060][T13020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.860130][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.681626][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.824130][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.136419][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.150388][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.161431][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 629.241624][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 629.253761][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 629.286161][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.430238][ T5840] Bluetooth: hci1: command tx timeout [ 631.658269][ T3056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.079720][T13694] loop4: detected capacity change from 0 to 764 [ 633.950807][ T5840] Bluetooth: hci1: command tx timeout [ 634.003220][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.504494][T13705] rock: directory entry would overflow storage [ 634.510805][T13705] rock: sig=0x4f50, size=4, remaining=3 [ 634.516418][T13705] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 635.992297][ T5840] Bluetooth: hci1: command tx timeout [ 636.048699][T13650] chnl_net:caif_netlink_parms(): no params data found [ 636.103548][ T5014] bridge_slave_1: left allmulticast mode [ 636.126852][ T5014] bridge_slave_1: left promiscuous mode [ 636.148169][ T5014] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.236836][ T5014] bridge_slave_0: left allmulticast mode [ 636.250839][ T5014] bridge_slave_0: left promiscuous mode [ 636.282293][ T5014] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.271114][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.772621][ T5014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.859755][T13748] overlayfs: failed to resolve './file0': -2 [ 638.069312][ T5840] Bluetooth: hci1: command tx timeout [ 638.167552][ T5014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.272359][ T5014] bond0 (unregistering): Released all slaves [ 638.732344][T13715] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 638.756635][T13715] macvlan2: entered allmulticast mode [ 638.778159][T13715] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 639.112532][ T5014] hsr_slave_0: left promiscuous mode [ 639.153669][ T5014] hsr_slave_1: left promiscuous mode [ 639.188115][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.208267][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.220919][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.228332][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.324374][ T5014] veth1_macvtap: left promiscuous mode [ 639.361315][ T5014] veth0_macvtap: left promiscuous mode [ 640.088257][ T5014] veth1_vlan: left promiscuous mode [ 640.098355][ T5014] veth0_vlan: left promiscuous mode [ 641.281263][ T5849] Bluetooth: hci6: command 0x0406 tx timeout [ 641.332788][T13776] loop5: detected capacity change from 0 to 32768 [ 641.359285][T13776] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2210 (13776) [ 641.387937][T13776] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 641.400812][T13776] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 641.409636][T13776] BTRFS info (device loop5): using free-space-tree [ 643.495246][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.094783][ T5897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.113834][T13776] BTRFS error (device loop5): open_ctree failed: -4 [ 644.559766][ T5908] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 644.722241][ T5908] usb 6-1: device descriptor read/64, error -71 [ 644.979443][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 645.026092][ T5014] team0 (unregistering): Port device team_slave_1 removed [ 645.072908][ T5014] team0 (unregistering): Port device team_slave_0 removed [ 645.130218][ T5908] usb 6-1: device descriptor read/64, error -71 [ 645.259887][ T5908] usb usb6-port1: attempt power cycle [ 645.631473][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 645.701532][ T5908] usb 6-1: device descriptor read/8, error -71 [ 646.029345][ T5908] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 646.114924][ T5908] usb 6-1: device descriptor read/8, error -71 [ 646.141665][T13650] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.349503][T13650] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.411723][T13650] bridge_slave_0: entered allmulticast mode [ 646.429979][ T5908] usb usb6-port1: unable to enumerate USB device [ 646.484875][T13650] bridge_slave_0: entered promiscuous mode [ 647.493894][T13650] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.549538][T13650] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.597600][T13650] bridge_slave_1: entered allmulticast mode [ 647.648439][T13650] bridge_slave_1: entered promiscuous mode [ 649.442103][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.109823][T13650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.422771][T13863] Cannot find set identified by id 0 to match [ 650.694149][T13650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.960222][T13650] team0: Port device team_slave_0 added [ 651.164336][ T5908] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 651.191264][T13650] team0: Port device team_slave_1 added [ 651.363501][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.210290][ T5988] IPVS: starting estimator thread 0... [ 652.230878][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.240985][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.254829][ T5908] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 652.264422][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.419430][T13881] IPVS: using max 20 ests per chain, 48000 per kthread [ 652.528859][ T5908] usb 6-1: config 0 descriptor?? [ 653.497533][ T5897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.598034][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 653.605972][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 653.620234][ T5908] usb 6-1: USB disconnect, device number 9 [ 653.796856][T13650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.881370][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.075714][T13650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.206955][T13650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.257458][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.330859][T13650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.515912][T13913] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 654.543469][T13913] macvlan2: entered allmulticast mode [ 654.565426][T13913] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 654.597410][T13913] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 654.662846][T13923] netlink: 'syz.6.2234': attribute type 1 has an invalid length. [ 654.678869][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2234'. [ 654.800639][T13903] syzkaller0: entered promiscuous mode [ 654.806152][T13903] syzkaller0: entered allmulticast mode [ 655.235711][T10127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.090527][T13965] loop5: detected capacity change from 0 to 32768 [ 659.154054][T13965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2240 (13965) [ 659.871182][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.884477][T13965] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 659.896174][T13965] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 659.905576][T13965] BTRFS info (device loop5): using free-space-tree [ 660.383981][T10415] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 661.591373][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.113394][T13927] netlink: 'syz.6.2234': attribute type 1 has an invalid length. [ 662.121379][T13927] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2234'. [ 662.149652][T13650] hsr_slave_0: entered promiscuous mode [ 662.169654][T13650] hsr_slave_1: entered promiscuous mode [ 662.179747][T13650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.187321][T13650] Cannot create hsr debugfs directory [ 664.168718][T14025] netlink: 'syz.3.2250': attribute type 1 has an invalid length. [ 664.314607][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 664.498708][T14028] netlink: 'syz.3.2250': attribute type 1 has an invalid length. [ 665.049371][T14028] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2250'. [ 665.122807][T14034] loop5: detected capacity change from 0 to 764 [ 665.657824][T14042] rock: directory entry would overflow storage [ 665.664098][T14042] rock: sig=0x4f50, size=4, remaining=3 [ 665.669734][T14042] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 667.353776][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.591194][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 669.270512][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.308319][T14065] xt_CT: No such helper "syz0" [ 670.369108][T14100] random: crng reseeded on system resumption [ 671.514976][T13650] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 671.631920][T13650] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 673.715244][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.730280][T13650] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 673.751183][T14118] tty tty28: ldisc open failed (-12), clearing slot 27 [ 673.758567][T14119] tty tty3: ldisc open failed (-12), clearing slot 2 [ 673.878579][T14123] netlink: 'syz.3.2267': attribute type 15 has an invalid length. [ 673.950012][T13650] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 675.037542][T13650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.049715][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.120662][T13650] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.150727][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 675.175506][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.182639][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.393633][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.400822][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.024458][T13650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.179371][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 677.131414][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 677.189521][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 677.242592][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.273331][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 242 [ 677.334921][ T8] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 677.360135][T14167] syzkaller0: entered promiscuous mode [ 677.368124][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.382103][T14167] syzkaller0: entered allmulticast mode [ 677.412455][ T8] usb 4-1: config 0 descriptor?? [ 677.798216][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2278'. [ 677.860983][ T8] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v0.03 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 678.052951][T14152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.064229][T14152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.096880][ T8] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -71 [ 678.125446][ T8] usb 4-1: USB disconnect, device number 39 [ 678.900071][T14182] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 679.513184][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.619120][T14183] bond2: entered promiscuous mode [ 679.648804][T14183] bond2: entered allmulticast mode [ 679.657324][T14183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.764439][T13650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.855870][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.028898][T14199] Cannot find set identified by id 0 to match [ 683.180811][T14217] netlink: 'syz.5.2285': attribute type 15 has an invalid length. [ 685.273443][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.284964][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.713034][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 685.723691][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 685.742415][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 685.760577][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 685.771290][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 685.781897][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 685.959715][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2291'. [ 685.994778][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.615206][ T29] audit: type=1800 audit(1737542488.559:74): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2292" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 686.635678][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.901913][T14265] syzkaller0: entered promiscuous mode [ 686.974990][T14265] syzkaller0: entered allmulticast mode [ 687.994177][ T5840] Bluetooth: hci1: command tx timeout [ 690.069856][ T5840] Bluetooth: hci1: command tx timeout [ 690.400021][T10437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.677299][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.152980][ T5840] Bluetooth: hci1: command tx timeout [ 692.906773][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 692.992649][T14321] netlink: 'syz.3.2303': attribute type 15 has an invalid length. [ 693.103892][T14249] chnl_net:caif_netlink_parms(): no params data found [ 694.378860][T14344] fuse: Bad value for 'fd' [ 694.383534][ T5840] Bluetooth: hci1: command tx timeout [ 694.745308][T14349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2306'. [ 694.761336][ T35] bridge_slave_1: left allmulticast mode [ 694.767004][ T35] bridge_slave_1: left promiscuous mode [ 694.775975][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.806652][ T35] bridge_slave_0: left allmulticast mode [ 694.813280][ T35] bridge_slave_0: left promiscuous mode [ 694.819678][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.694052][T14364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.378674][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.709641][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.359663][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.377320][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.387652][ T35] bond0 (unregistering): Released all slaves [ 698.407305][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.414876][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.422432][T14249] bridge_slave_0: entered allmulticast mode [ 698.436316][T14249] bridge_slave_0: entered promiscuous mode [ 698.720081][T14382] bridge0: port 3(erspan0) entered blocking state [ 698.726579][T14382] bridge0: port 3(erspan0) entered disabled state [ 699.638018][T14382] erspan0: entered allmulticast mode [ 699.738478][T14382] erspan0: entered promiscuous mode [ 699.752552][T14382] bridge0: port 3(erspan0) entered blocking state [ 699.759068][T14382] bridge0: port 3(erspan0) entered forwarding state [ 699.799027][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.828222][T14249] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.846122][T14249] bridge_slave_1: entered allmulticast mode [ 700.090341][T14402] netlink: 'syz.5.2314': attribute type 1 has an invalid length. [ 700.135316][T14249] bridge_slave_1: entered promiscuous mode [ 701.069858][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2316'. [ 701.260052][ T35] hsr_slave_0: left promiscuous mode [ 701.285355][ T35] hsr_slave_1: left promiscuous mode [ 701.307309][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.330056][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.267641][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.554611][T10437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.597926][ T35] team0 (unregistering): Port device team_slave_1 removed [ 702.638750][ T35] team0 (unregistering): Port device team_slave_0 removed [ 703.028532][T14402] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 703.289753][T14249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.361108][T14249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.395911][T14441] loop5: detected capacity change from 0 to 764 [ 703.798126][T14457] rock: directory entry would overflow storage [ 703.804679][T14457] rock: sig=0x4f50, size=4, remaining=3 [ 703.810476][T14457] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 704.710441][T14452] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 704.772144][T14249] team0: Port device team_slave_0 added [ 705.124279][T14249] team0: Port device team_slave_1 added [ 706.100694][ T5852] IPVS: starting estimator thread 0... [ 706.749408][T14470] IPVS: using max 19 ests per chain, 45600 per kthread [ 706.868979][T14249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.912893][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.968626][T14249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.106608][ T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.129561][T14249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.136515][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.317522][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.562525][T14249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.151203][T14249] hsr_slave_0: entered promiscuous mode [ 709.236241][T14249] hsr_slave_1: entered promiscuous mode [ 709.489641][T14249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.180571][T14249] Cannot create hsr debugfs directory [ 713.426602][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.460313][T14524] batadv_slave_0: entered promiscuous mode [ 713.565743][T14249] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 713.617039][T14249] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 713.692551][T14249] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 713.741009][T14249] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 713.785571][T14521] syz.5.2337 (14521): drop_caches: 2 [ 714.075942][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.076410][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.142868][T14249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.617375][T14249] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.755468][T14535] syzkaller0: entered promiscuous mode [ 715.799924][T14535] syzkaller0: entered allmulticast mode [ 716.344855][T14548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2345'. [ 716.457140][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.464276][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.177508][T14557] loop6: detected capacity change from 0 to 32768 [ 719.839463][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.850240][T10437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.162273][T10126] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.169438][T10126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.245586][T14559] batadv2: entered allmulticast mode [ 720.485170][T14575] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 721.861236][T14586] binder: BINDER_SET_CONTEXT_MGR already set [ 721.898486][T14586] binder: 14584:14586 ioctl 4018620d 200002c0 returned -16 [ 723.826400][T14615] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 723.914540][T14615] macvlan2: entered allmulticast mode [ 724.084605][T14615] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 724.582838][T14628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.473278][T14249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.518878][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.589868][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.764659][ T5840] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 725.983399][T14642] random: crng reseeded on system resumption [ 727.813034][T14660] binder: BINDER_SET_CONTEXT_MGR already set [ 727.899550][T14660] binder: 14657:14660 ioctl 4018620d 200002c0 returned -16 [ 728.027432][T14662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.078114][T14662] batadv_slave_0: entered promiscuous mode [ 728.137700][T14666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2372'. [ 728.179034][T14666] bond_slave_0: entered promiscuous mode [ 728.184785][T14666] bond_slave_1: entered promiscuous mode [ 728.221048][T14666] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 728.252453][T14666] bond_slave_0: left promiscuous mode [ 728.257881][T14666] bond_slave_1: left promiscuous mode [ 729.101172][T14249] veth0_vlan: entered promiscuous mode [ 729.156348][T14249] veth1_vlan: entered promiscuous mode [ 729.550945][T14249] veth0_macvtap: entered promiscuous mode [ 729.578276][T14249] veth1_macvtap: entered promiscuous mode [ 729.829318][ T5840] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 729.845184][ T5840] Bluetooth: hci2: Injecting HCI hardware error event [ 729.854092][ T5840] Bluetooth: hci2: hardware error 0x00 [ 729.883522][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.104764][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.145655][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.178341][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.384586][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.419384][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.214769][ T5840] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 732.239271][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.249109][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.292959][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.325266][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.351572][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.381853][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.426108][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.478350][T14249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.558496][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.683862][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.697051][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.709441][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.719552][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.731701][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.742385][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.753268][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.778039][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.799393][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.819609][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.840739][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.861725][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.889213][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.910395][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.929050][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.964738][T14249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.252489][T14249] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.269676][T14249] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.288773][T14249] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.309138][T14249] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.353370][T14740] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 734.495396][T14735] bond3: entered promiscuous mode [ 734.510834][T14735] bond3: entered allmulticast mode [ 734.516235][T14735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.734271][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2388'. [ 734.775061][T14757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2387'. [ 734.784371][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 736.907968][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.926527][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.036035][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.055803][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 737.067852][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.084921][T14780] bridge_slave_1: left allmulticast mode [ 737.136999][T14780] bridge_slave_1: left promiscuous mode [ 737.471322][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.497469][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.101836][ T5840] Bluetooth: min 8 > max 0 [ 740.490578][T14826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.159679][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 742.947943][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.832950][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.258764][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2410'. [ 745.551102][T14864] bridge_slave_1: left allmulticast mode [ 745.556801][T14864] bridge_slave_1: left promiscuous mode [ 746.569580][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.960887][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.698080][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.922474][T14891] bond_slave_0: entered promiscuous mode [ 748.928244][T14891] bond_slave_1: entered promiscuous mode [ 749.012480][T14891] macvlan2: entered promiscuous mode [ 749.054335][T14891] bond0: entered promiscuous mode [ 749.075682][T14891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 749.262206][ T5897] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 749.739486][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 749.758146][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 750.713275][ T3502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.810066][ T5897] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 750.852440][ T5897] usb 6-1: config 0 has no interface number 0 [ 750.961725][ T5897] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 750.998994][ T5897] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 751.069267][ T5897] usb 6-1: config 0 interface 88 has no altsetting 0 [ 751.119340][ T5897] usb 6-1: string descriptor 0 read error: -22 [ 751.125590][ T5897] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 751.169791][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 751.421435][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 751.458673][ T5897] usb 6-1: config 0 descriptor?? [ 752.653136][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 752.820259][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.016161][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 753.120347][ T8] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 753.189437][ T5897] usb 6-1: can't set config #0, error -71 [ 753.205402][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.242386][ T5897] usb 6-1: USB disconnect, device number 10 [ 753.270046][ T8] usb 4-1: Product: syz [ 753.287088][ T8] usb 4-1: Manufacturer: syz [ 753.302079][T14935] dccp_close: ABORT with 15584 bytes unread [ 753.322190][ T8] usb 4-1: SerialNumber: syz [ 753.330586][ T8] usb 4-1: config 0 descriptor?? [ 753.450395][T14955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2426'. [ 753.459573][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 754.402379][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.824942][ T5924] usb 4-1: USB disconnect, device number 40 [ 755.160915][ T3502] bridge_slave_1: left allmulticast mode [ 755.196294][ T3502] bridge_slave_1: left promiscuous mode [ 755.199370][T14968] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 755.319379][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 755.541942][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.575317][T14972] binder: BINDER_SET_CONTEXT_MGR already set [ 755.601114][T14972] binder: 14970:14972 ioctl 4018620d 200002c0 returned -16 [ 755.610400][ T3502] bridge_slave_0: left allmulticast mode [ 755.667414][ T3502] bridge_slave_0: left promiscuous mode [ 755.929853][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.895404][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.411534][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.453321][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.493684][ T3502] bond0 (unregistering): Released all slaves [ 758.540521][T14971] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 758.548322][T14971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2431'. [ 758.691516][ T3502] IPVS: stopping backup sync thread 7298 ... [ 759.769399][ T5897] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 761.210015][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.215203][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 761.234944][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 761.249738][ T5897] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 761.258273][ T5897] usb 4-1: config 0 has no interface number 0 [ 761.264521][ T5897] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 761.276616][ T5897] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 761.286563][ T5897] usb 4-1: config 0 interface 88 has no altsetting 0 [ 761.296417][ T5897] usb 4-1: string descriptor 0 read error: -22 [ 761.479500][ T5897] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 761.656355][T15026] netlink: 'syz.6.2442': attribute type 15 has an invalid length. [ 762.459254][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 762.482516][ T5897] usb 4-1: config 0 descriptor?? [ 762.911454][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.136029][ T5897] usb 4-1: can't set config #0, error -71 [ 764.149620][ T5897] usb 4-1: USB disconnect, device number 41 [ 765.497089][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2447'. [ 765.577238][T15048] bond_slave_0: entered promiscuous mode [ 765.582995][T15048] bond_slave_1: entered promiscuous mode [ 765.595553][T15051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 765.663903][T15048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.685790][T15048] bond_slave_0: left promiscuous mode [ 765.691279][T15048] bond_slave_1: left promiscuous mode [ 766.714150][T15052] batadv1: entered allmulticast mode [ 766.740181][T10127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.169036][ T3502] hsr_slave_0: left promiscuous mode [ 768.248243][ T3502] hsr_slave_1: left promiscuous mode [ 768.625323][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.634007][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.662877][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.739343][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.837978][ T3502] veth1_macvtap: left promiscuous mode [ 768.838253][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'. [ 768.853932][ T3502] veth0_macvtap: left promiscuous mode [ 768.860229][ T3502] veth1_vlan: left promiscuous mode [ 768.870594][ T3502] veth0_vlan: left promiscuous mode [ 769.110642][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 770.942534][ T3502] team0 (unregistering): Port device team_slave_1 removed [ 771.028382][ T3502] team0 (unregistering): Port device team_slave_0 removed [ 771.719560][T15085] netlink: 'syz.6.2458': attribute type 15 has an invalid length. [ 771.909952][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.199424][ T5895] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 772.725085][ T5895] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 773.502434][ T5895] usb 4-1: config 0 has no interface number 0 [ 773.514372][ T5895] usb 4-1: config 0 interface 98 has no altsetting 0 [ 773.526712][ T5895] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 773.562132][T15101] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 773.562132][T15101] program syz.5.2461 not setting count and/or reply_len properly [ 773.620964][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.940031][ T5895] usb 4-1: Product: syz [ 773.979986][ T5895] usb 4-1: Manufacturer: syz [ 773.984608][ T5895] usb 4-1: SerialNumber: syz [ 774.916702][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.039138][ T5895] usb 4-1: config 0 descriptor?? [ 775.600989][T15116] netlink: 'syz.1.2466': attribute type 30 has an invalid length. [ 775.641218][ T5895] usb 4-1: can't set config #0, error -71 [ 775.687172][T15116] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 775.909636][ T5895] usb 4-1: USB disconnect, device number 42 [ 776.085736][T15116] netlink: 804 bytes leftover after parsing attributes in process `syz.1.2466'. [ 776.595916][T15133] binder: BINDER_SET_CONTEXT_MGR already set [ 776.650916][T15133] binder: 15132:15133 ioctl 4018620d 200002c0 returned -16 [ 776.691201][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2470'. [ 776.760827][T15138] bridge_slave_1: left allmulticast mode [ 776.801273][T15138] bridge_slave_1: left promiscuous mode [ 776.807041][T15138] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.116092][T15141] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2472'. [ 777.433229][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.444187][T15151] 9pnet_fd: Insufficient options for proto=fd [ 778.949635][T15166] netlink: 'syz.8.2477': attribute type 15 has an invalid length. [ 780.477275][T15170] netlink: 'syz.1.2480': attribute type 30 has an invalid length. [ 780.485272][T15170] netlink: 'syz.1.2480': attribute type 1 has an invalid length. [ 780.497025][T15170] netlink: 804 bytes leftover after parsing attributes in process `syz.1.2480'. [ 780.639596][ T3056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 782.267457][T15186] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 782.678956][T15186] macvlan2: entered allmulticast mode [ 782.734862][T15186] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 783.069951][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.262571][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 784.969635][ T1543] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 785.230413][ T1543] usb 5-1: Using ep0 maxpacket: 8 [ 785.251522][ T1543] usb 5-1: unable to get BOS descriptor or descriptor too short [ 785.272654][ T1543] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 785.307542][ T1543] usb 5-1: config 0 has no interface number 0 [ 785.481287][ T1543] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 785.723907][ T1543] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 785.734436][ T1543] usb 5-1: config 0 interface 88 has no altsetting 0 [ 785.793828][ T1543] usb 5-1: string descriptor 0 read error: -22 [ 786.799428][ T1543] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 786.973313][T15237] netlink: 'syz.3.2494': attribute type 30 has an invalid length. [ 787.000666][ T1543] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 787.028541][T15237] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 787.043075][ T1543] usb 5-1: config 0 descriptor?? [ 787.049893][ T3502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.091326][T15237] netlink: 804 bytes leftover after parsing attributes in process `syz.3.2494'. [ 787.147555][ T1543] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input16 [ 788.636100][T15247] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 788.636100][T15247] program syz.6.2497 not setting count and/or reply_len properly [ 789.280195][ T5897] usb 5-1: USB disconnect, device number 23 [ 789.624328][T15268] Cannot find set identified by id 0 to match [ 790.413426][T15118] udevd[15118]: Error opening device "/dev/input/event4": No such file or directory [ 790.471725][T15118] udevd[15118]: Unable to EVIOCGABS device "/dev/input/event4" [ 790.617379][T15118] udevd[15118]: Unable to EVIOCGABS device "/dev/input/event4" [ 792.174170][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.235724][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.492527][T15294] netlink: 'syz.5.2510': attribute type 30 has an invalid length. [ 792.526887][T15294] netlink: 'syz.5.2510': attribute type 1 has an invalid length. [ 792.577420][T15294] netlink: 804 bytes leftover after parsing attributes in process `syz.5.2510'. [ 796.176937][T15333] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 796.215702][T15333] macvlan2: entered allmulticast mode [ 796.318740][T15333] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 796.421491][T15347] random: crng reseeded on system resumption [ 796.725930][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2524'. [ 797.921762][T10127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.937329][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.083499][T15359] tipc: Enabling of bearer rejected, failed to enable media [ 798.255018][T15359] syzkaller0: entered promiscuous mode [ 798.280402][T15359] syzkaller0: entered allmulticast mode [ 803.674710][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.687160][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.771652][T15420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2540'. [ 805.725894][T15377] bond_slave_0: entered promiscuous mode [ 805.731758][T15377] bond_slave_1: entered promiscuous mode [ 805.738952][T15377] macvlan2: entered promiscuous mode [ 805.745069][T15377] bond0: entered promiscuous mode [ 805.752275][T15377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 805.770105][T15381] netlink: 'syz.8.2530': attribute type 15 has an invalid length. [ 805.994650][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2542'. [ 806.349431][ T968] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 807.347095][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 807.571433][ T968] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 807.586186][ T968] usb 7-1: config 0 has no interface number 0 [ 807.856213][ T968] usb 7-1: config 0 interface 98 has no altsetting 0 [ 808.101843][ T968] usb 7-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 808.111203][ T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.152977][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.175064][ T968] usb 7-1: Product: syz [ 808.748438][ T968] usb 7-1: Manufacturer: syz [ 808.763584][ T968] usb 7-1: SerialNumber: syz [ 808.794856][ T968] usb 7-1: config 0 descriptor?? [ 809.136780][T15468] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 809.136780][T15468] program syz.4.2552 not setting count and/or reply_len properly [ 809.526638][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 809.529597][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 811.448134][ T968] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 811.707468][T15484] tipc: Enabling of bearer rejected, failed to enable media [ 812.554027][T15484] syzkaller0: entered promiscuous mode [ 812.569403][T15484] syzkaller0: entered allmulticast mode [ 812.606479][ T968] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 812.614745][ T968] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 812.625731][ T5897] usb 7-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 812.641981][ T5897] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 812.692115][ T968] usb 7-1: USB disconnect, device number 8 [ 812.929920][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2560'. [ 813.138096][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2562'. [ 813.351859][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2563'. [ 815.194633][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 816.482374][T10437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.350285][T15510] batadv1: entered allmulticast mode [ 818.833497][T15538] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 818.873041][T15538] macvlan2: entered allmulticast mode [ 819.000529][T15538] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 820.289645][ T1543] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 820.874766][ T1543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.953669][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.120163][ T1543] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 821.139368][ T1543] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 821.148422][ T1543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.200417][ T1543] usb 5-1: config 0 descriptor?? [ 822.880535][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.086929][ T968] usb 5-1: USB disconnect, device number 24 [ 823.278652][T15585] tipc: Enabling of bearer rejected, failed to enable media [ 823.589549][ T5892] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 823.599083][T15586] syzkaller0: entered promiscuous mode [ 823.635386][T15586] syzkaller0: entered allmulticast mode [ 823.789496][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 823.869326][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 823.879702][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.951720][ T5892] usb 7-1: config 0 has no interfaces? [ 823.976404][ T5892] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 824.006250][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.053173][ T5892] usb 7-1: config 0 descriptor?? [ 824.092097][ T8] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 824.125576][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 824.202562][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.319335][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 825.369228][ T8] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 825.378895][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.499961][ T8] usb 9-1: config 0 descriptor?? [ 826.519863][ T8] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v0.03 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0 [ 826.604145][ T8] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -38 [ 826.631437][ T8] usb 9-1: USB disconnect, device number 5 [ 826.710657][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 827.309616][ T5892] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 827.469596][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 827.483786][ T5892] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 827.503973][ T5892] usb 6-1: config 0 has no interface number 0 [ 827.522601][ T5892] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 827.541126][ T5892] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 827.553601][ T5892] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 827.572898][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.593803][ T5892] usb 6-1: Product: syz [ 827.599538][ T5892] usb 6-1: Manufacturer: syz [ 827.611290][ T5892] usb 6-1: SerialNumber: syz [ 827.618939][ T5987] usb 7-1: USB disconnect, device number 9 [ 827.636122][ T5892] usb 6-1: config 0 descriptor?? [ 827.648936][T15609] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 827.672905][T15609] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 828.018945][T15609] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 828.063513][T15609] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 828.523456][ T5892] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 828.575944][ T5892] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 828.590198][ T5892] asix 6-1:0.251: probe with driver asix failed with error -71 [ 828.623053][ T5892] usb 6-1: USB disconnect, device number 11 [ 828.637966][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.579897][ T5892] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 829.769313][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 829.899138][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.909890][ T5892] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.918865][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 829.929146][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.945036][ T5892] usb 6-1: config 0 descriptor?? [ 830.240045][ T8] usb 6-1: USB disconnect, device number 12 [ 832.570365][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 833.227559][T15654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.767715][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 834.655893][T15664] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 834.907317][T15668] bond1: entered promiscuous mode [ 834.925739][T15668] bond1: entered allmulticast mode [ 834.950471][T15668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 836.658231][T15691] bond_slave_0: entered promiscuous mode [ 836.663975][T15691] bond_slave_1: entered promiscuous mode [ 836.959358][T15691] macvlan2: entered promiscuous mode [ 837.000089][T15691] bond0: entered promiscuous mode [ 837.026986][T15691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 837.560820][T15684] dccp_close: ABORT with 15584 bytes unread [ 838.217858][T15707] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 838.311554][T15707] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 838.449097][T15711] bond2: entered promiscuous mode [ 838.455197][T10438] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 838.484104][T15711] ip6gretap1: entered promiscuous mode [ 838.508339][T15711] bond2: entered allmulticast mode [ 838.535503][T15711] ip6gretap1: entered allmulticast mode [ 838.573470][T15711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 838.619295][T10126] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 839.078332][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.042714][T15716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 840.048897][T15716] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 840.077090][T15727] macvlan3: entered promiscuous mode [ 840.150357][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.163018][T15716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 840.185186][T15716] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 840.187491][T15727] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 840.255346][T15716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 840.295367][T15716] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 840.959536][T15716] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 840.985821][T15716] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 841.058795][T15716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 841.069343][T15716] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 841.176157][T15716] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 842.529412][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 842.535518][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 842.552872][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 843.035875][T15760] Bluetooth: hci6: command 0x0406 tx timeout [ 843.109292][T15760] Bluetooth: hci1: command 0x0c1a tx timeout [ 843.656404][ T29] audit: type=1326 audit(1737542645.599:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.3.2626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b65f85d29 code=0x0 [ 844.210523][T15784] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 844.268200][T15784] macvlan2: entered allmulticast mode [ 844.335180][T15784] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 844.640123][T15760] Bluetooth: hci0: command 0x0406 tx timeout [ 844.646501][T15760] Bluetooth: hci4: command 0x0406 tx timeout [ 844.654648][T15760] Bluetooth: hci3: command 0x0406 tx timeout [ 845.109375][ T5849] Bluetooth: hci6: command 0x0406 tx timeout [ 845.213615][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 845.289133][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.063573][T10127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.281548][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 848.989333][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 849.370225][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 849.458454][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 849.529300][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.516682][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 242 [ 850.560212][ T8] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 850.599345][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.625330][ T8] usb 2-1: config 0 descriptor?? [ 852.040704][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 852.048102][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 852.158245][ T8] usb 2-1: USB disconnect, device number 7 [ 852.315304][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.337681][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 853.709560][ T5987] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 854.289350][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 854.363724][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.466682][ T5987] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 854.509341][ T5987] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 854.581444][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.629351][ T5852] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 854.666397][ T5987] usb 2-1: config 0 descriptor?? [ 854.819286][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 855.434253][ T5852] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 855.533255][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2651'. [ 855.536963][ T5852] usb 5-1: config 0 has no interface number 0 [ 855.834060][ T5852] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 856.390907][ T5852] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 856.487930][ T5852] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 856.512201][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.530571][ T5852] usb 5-1: Product: syz [ 856.535303][ T5852] usb 5-1: Manufacturer: syz [ 856.541015][ T29] audit: type=1326 audit(1737542658.479:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.5.2654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae1b785d29 code=0x0 [ 856.599517][ T5852] usb 5-1: SerialNumber: syz [ 856.625722][ T5852] usb 5-1: config 0 descriptor?? [ 856.672045][T15865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 856.704280][T15865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 857.103858][T15865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 857.142398][T15865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 857.405920][ T5852] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 857.459472][ T5852] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 857.509850][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 857.552656][ T5852] asix 5-1:0.251: probe with driver asix failed with error -5 [ 857.639717][ T5852] usb 5-1: USB disconnect, device number 25 [ 858.070081][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 858.769543][T15931] netlink: 'syz.3.2664': attribute type 1 has an invalid length. [ 859.242090][T15931] bond4: entered promiscuous mode [ 859.247197][T15931] bond4: entered allmulticast mode [ 859.274027][T15931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.569209][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.831886][T10437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 864.931558][ T5892] usb 2-1: USB disconnect, device number 8 [ 865.099996][T15980] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 865.711219][T15991] bond3: entered promiscuous mode [ 865.716774][T15991] bond3: entered allmulticast mode [ 865.733329][T15991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.925286][T15986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 865.925446][T15986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 865.925572][T15986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 865.926247][T15986] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 865.926378][T15986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 867.993518][ T5849] Bluetooth: hci6: command 0x0406 tx timeout [ 868.000045][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 868.006936][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 868.022247][T15760] Bluetooth: hci1: command 0x0c1a tx timeout [ 868.022406][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 869.593202][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.774654][ T3502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 869.781180][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.435435][T16032] tipc: Enabling of bearer rejected, failed to enable media [ 870.457927][T16033] loop8: detected capacity change from 0 to 764 [ 871.385670][T16041] syzkaller0: entered promiscuous mode [ 871.391276][T16041] syzkaller0: entered allmulticast mode [ 871.887314][T16045] rock: directory entry would overflow storage [ 871.893670][T16045] rock: sig=0x4f50, size=4, remaining=3 [ 871.899375][T16045] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 874.749474][ T5897] usb 7-1: [UEAGLE-ATM] firmware is not available [ 874.849915][T16063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2693'. [ 875.257950][T16057] /dev/nullb0: Can't open blockdev [ 875.349872][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 875.991658][T10124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.109835][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.121740][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.960820][T16070] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 881.968821][T16070] macvlan2: entered allmulticast mode [ 882.004192][T16070] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 882.073978][T16070] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 884.024877][T16078] netlink: 'syz.5.2696': attribute type 15 has an invalid length. [ 884.658110][ T968] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 885.504765][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 885.535879][ T968] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 885.547735][ T968] usb 6-1: config 0 has no interface number 0 [ 885.554043][ T968] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 885.564290][ T968] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 885.576605][ T968] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 886.079763][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.279855][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 886.352825][ T968] usb 6-1: Product: syz [ 886.357016][ T968] usb 6-1: Manufacturer: syz [ 886.399354][ T968] usb 6-1: SerialNumber: syz [ 886.536941][ T968] usb 6-1: config 0 descriptor?? [ 886.648605][T16117] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 886.715947][T16117] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 886.901964][ T3056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 888.619102][ T968] asix 6-1:0.251: probe with driver asix failed with error -71 [ 888.660430][ T968] usb 6-1: USB disconnect, device number 13 [ 888.889367][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2714'. [ 890.589351][T15382] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 890.786144][T15382] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.830025][T15382] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 890.889431][T15382] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 890.949155][T15382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.995293][T15382] usb 4-1: config 0 descriptor?? [ 891.035829][T15382] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 891.999791][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 892.601021][T15382] usb 4-1: USB disconnect, device number 43 [ 892.629657][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 893.391472][T16204] input: syz1 as /devices/virtual/input/input17 [ 894.287176][T16215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.354824][T16215] batadv_slave_0: entered promiscuous mode [ 894.683451][T16224] netlink: 'syz.8.2730': attribute type 1 has an invalid length. [ 894.691289][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2730'. [ 894.705168][T16224] netlink: 'syz.8.2730': attribute type 1 has an invalid length. [ 894.714331][T16224] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2730'. [ 894.724014][T15382] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 895.852774][T15382] usb 6-1: Using ep0 maxpacket: 16 [ 896.115855][T15382] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.129221][T15382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 896.181734][T15382] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.209223][T15382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.226165][T15382] usb 6-1: Product: syz [ 896.243102][T15382] usb 6-1: Manufacturer: syz [ 896.247716][T15382] usb 6-1: SerialNumber: syz [ 896.492121][T15382] usb 6-1: 0:2 : does not exist [ 896.543652][T15382] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 896.624408][T15382] usb 6-1: USB disconnect, device number 14 [ 896.850121][T16153] udevd[16153]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.025076][T10437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 898.402891][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 899.212419][ T5852] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 899.419414][ T5852] usb 6-1: Using ep0 maxpacket: 16 [ 899.469814][ T5852] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 899.479025][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.428406][ T5852] usb 6-1: Product: syz [ 900.595075][ T5852] usb 6-1: Manufacturer: syz [ 900.764943][ T5852] usb 6-1: SerialNumber: syz [ 901.143040][ T5852] usb 6-1: config 0 descriptor?? [ 901.181169][ T5852] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 901.252944][ T5852] usb 6-1: Detected FT-X [ 901.289563][T16295] loop8: detected capacity change from 0 to 764 [ 901.397722][ T5852] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 901.459383][ T5892] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 901.653458][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 901.672822][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.693262][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.960524][T16308] rock: directory entry would overflow storage [ 901.967215][T16308] rock: sig=0x4f50, size=4, remaining=3 [ 901.973508][T16308] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 902.667006][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.684910][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.640752][ T5892] usb 5-1: Product: syz [ 903.644962][ T5892] usb 5-1: Manufacturer: syz [ 903.649808][ T5892] usb 5-1: SerialNumber: syz [ 903.828047][ T5852] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 903.875528][ T5852] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 904.005984][ T5892] usb 5-1: 0:2 : does not exist [ 904.031287][ T5892] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 904.865317][ T5852] usb 6-1: USB disconnect, device number 15 [ 904.876260][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 904.893202][T10126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 904.904941][ T5852] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 905.470975][ T5852] ftdi_sio 6-1:0.0: device disconnected [ 906.298647][ T5892] usb 5-1: USB disconnect, device number 26 [ 906.650079][ T29] audit: type=1326 audit(1737542708.589:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.3.2756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b65f85d29 code=0x0 [ 906.686371][T16153] udevd[16153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.733031][T16402] ISOFS: Unable to identify CD-ROM format. [ 911.356062][T16401] syzkaller0: entered promiscuous mode [ 911.403221][T16401] syzkaller0: entered allmulticast mode [ 911.830629][ T3056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.431205][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 918.171118][T16409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.178848][T16409] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 918.232813][T16409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 918.260095][T16409] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 918.266162][T16409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 919.489851][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 919.600763][T16476] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 919.658267][T16476] macvlan2: entered allmulticast mode [ 919.704948][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.734698][T16476] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 919.777568][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.813361][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.831509][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 919.843423][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.856245][ T8] usb 7-1: config 0 descriptor?? [ 919.883150][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'. [ 919.946402][T16485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'. [ 920.230418][T16012] Bluetooth: hci4: command 0x0406 tx timeout [ 920.236907][T16012] Bluetooth: hci3: command 0x0406 tx timeout [ 920.309345][T16012] Bluetooth: hci6: command 0x0406 tx timeout [ 920.309415][T15760] Bluetooth: hci0: command 0x0406 tx timeout [ 920.322301][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 920.848108][T16500] netlink: 'syz.3.2789': attribute type 1 has an invalid length. [ 920.873225][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 921.109720][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 922.091018][ T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 922.102748][ T8] usb 7-1: USB disconnect, device number 10 [ 922.229720][T16500] netlink: 'syz.3.2789': attribute type 1 has an invalid length. [ 922.265302][T16500] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2789'. [ 922.585347][T16512] syzkaller0: entered promiscuous mode [ 922.617344][T16512] syzkaller0: entered allmulticast mode [ 922.848721][T16529] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 924.124037][T16549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.428991][T16554] loop8: detected capacity change from 0 to 764 [ 925.803167][T16559] rock: directory entry would overflow storage [ 925.809641][T16559] rock: sig=0x4f50, size=4, remaining=3 [ 925.815258][T16559] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 927.169385][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 927.351378][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.364502][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.382126][ T8] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 927.392386][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.404495][ T8] usb 5-1: config 0 descriptor?? [ 927.417021][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 928.144131][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2802'. [ 928.205726][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2802'. [ 929.048095][T16535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 929.354267][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 929.539951][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 930.151956][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.211230][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.266221][ T968] usb 5-1: USB disconnect, device number 27 [ 930.279314][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 930.331089][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.379239][ T8] usb 6-1: Product: syz [ 930.394236][ T29] audit: type=1326 audit(1737542732.319:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 930.959236][ T8] usb 6-1: Manufacturer: syz [ 930.963873][ T8] usb 6-1: SerialNumber: syz [ 931.035095][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.135079][ T29] audit: type=1326 audit(1737542732.319:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 931.738585][ T8] usb 6-1: 0:2 : does not exist [ 931.746600][ T8] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 931.768262][T16610] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 931.793806][ T29] audit: type=1326 audit(1737542732.329:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 931.842683][T16610] macvlan3: entered allmulticast mode [ 931.868414][ T8] usb 6-1: USB disconnect, device number 16 [ 931.896091][T16610] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 931.975467][ T29] audit: type=1326 audit(1737542732.329:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 932.010789][T16610] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 932.141564][ T29] audit: type=1326 audit(1737542732.329:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 932.231709][T16453] udevd[16453]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.421013][ T29] audit: type=1326 audit(1737542732.329:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 932.776167][ T29] audit: type=1326 audit(1737542732.329:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 934.121859][ T29] audit: type=1326 audit(1737542732.329:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 934.167002][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2819'. [ 934.210280][ T29] audit: type=1326 audit(1737542732.329:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 934.234152][T16631] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2819'. [ 934.349514][ T29] audit: type=1326 audit(1737542732.329:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.8.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb5b85d29 code=0x7ffc0000 [ 935.162233][T16645] syzkaller0: entered promiscuous mode [ 935.187211][T16645] syzkaller0: entered allmulticast mode [ 936.939316][T15382] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 937.335030][T15382] usb 6-1: Using ep0 maxpacket: 16 [ 937.363927][T15382] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.435081][T15382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.514037][T15382] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 937.554151][T15382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.574923][T15382] usb 6-1: Product: syz [ 937.599113][T15382] usb 6-1: Manufacturer: syz [ 937.615436][T15382] usb 6-1: SerialNumber: syz [ 937.872016][T15382] usb 6-1: 0:2 : does not exist [ 937.896615][T15382] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 937.941745][T15382] usb 6-1: USB disconnect, device number 17 [ 938.243672][T16453] udevd[16453]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.088474][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2829'. [ 942.040646][T16694] bridge0: entered promiscuous mode [ 942.060011][T16694] bridge0: left promiscuous mode [ 944.259297][ T968] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 944.842244][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 945.035426][ T968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.046635][ T968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.074069][ T968] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 945.087680][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.192613][ T968] usb 6-1: Product: syz [ 945.659341][ T968] usb 6-1: Manufacturer: syz [ 945.675929][ T968] usb 6-1: SerialNumber: syz [ 945.978935][ T968] usb 6-1: 0:2 : does not exist [ 945.997889][ T968] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 946.037569][ T968] usb 6-1: USB disconnect, device number 18 [ 946.380301][T16739] udevd[16739]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.399967][ T5852] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 946.561253][ T5852] usb 7-1: config 0 has no interfaces? [ 946.655820][ T5852] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 946.683820][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.711625][ T5852] usb 7-1: Product: syz [ 946.737787][ T5852] usb 7-1: Manufacturer: syz [ 946.793052][ T5852] usb 7-1: SerialNumber: syz [ 946.835351][ T5852] usb 7-1: config 0 descriptor?? [ 947.085813][T16759] syzkaller0: entered promiscuous mode [ 947.099616][T16759] syzkaller0: entered allmulticast mode [ 947.176123][ T5852] usb 7-1: USB disconnect, device number 11 [ 952.355363][T16802] netlink: 'syz.6.2854': attribute type 1 has an invalid length. [ 953.359999][ C0] vkms_vblank_simulate: vblank timer overrun [ 953.526968][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.090287][T16802] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 955.287702][T16809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 955.348234][T16809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 955.372953][T16809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 955.410624][T16809] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 955.536563][T16809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 955.909963][ T5852] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 956.429985][ T5852] usb 9-1: Using ep0 maxpacket: 32 [ 956.437619][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.541831][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.349579][T16012] Bluetooth: hci4: command 0x0406 tx timeout [ 957.355654][T16012] Bluetooth: hci3: command 0x0406 tx timeout [ 957.429479][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 957.435566][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 957.461684][ T5852] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 957.475179][ T5852] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 957.550271][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.589734][T16012] Bluetooth: hci1: command 0x0c1a tx timeout [ 957.620275][ T5852] usb 9-1: config 0 descriptor?? [ 958.167119][ T5852] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0006/input/input18 [ 958.229752][ T5988] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 958.628963][ T5988] usb 6-1: unable to get BOS descriptor or descriptor too short [ 958.657939][ T5852] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0006/input/input19 [ 959.078058][ T5988] usb 6-1: not running at top speed; connect to a high speed hub [ 959.133593][ T5988] usb 6-1: config 12 has an invalid interface number: 173 but max is 0 [ 959.205369][ T5852] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 959.219623][ T5988] usb 6-1: config 12 has no interface number 0 [ 959.279334][ T5988] usb 6-1: config 12 interface 173 has no altsetting 0 [ 959.303065][ T5988] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 959.343059][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.373447][ T5988] usb 6-1: Product: syz [ 959.377627][ T5988] usb 6-1: Manufacturer: syz [ 959.435940][ T5988] usb 6-1: SerialNumber: syz [ 960.050915][ T5988] usb 6-1: USB disconnect, device number 19 [ 960.151905][ T968] usb 9-1: USB disconnect, device number 6 [ 960.527394][T16891] xt_CT: No such helper "syz0" [ 960.801416][ T5988] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 961.000736][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.039213][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.079222][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.125215][ T5988] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 961.164503][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.190817][ T5988] usb 2-1: config 0 descriptor?? [ 961.389967][T15382] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 961.895119][T15382] usb 6-1: Using ep0 maxpacket: 32 [ 961.900689][ T5988] usbhid 2-1:0.0: can't add hid device: -71 [ 961.906711][ T5988] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 962.890969][T15382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.909585][ T5988] usb 2-1: USB disconnect, device number 9 [ 963.587259][T15382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.859281][T15382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 963.992914][T15382] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 964.033853][T15382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.080015][T15382] usb 6-1: config 0 descriptor?? [ 964.249603][T15382] usb 6-1: can't set config #0, error -71 [ 964.299084][T15382] usb 6-1: USB disconnect, device number 20 [ 967.181751][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 967.369471][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 967.385736][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.425345][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.463279][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 967.549791][T16952] syzkaller0: entered promiscuous mode [ 967.684519][ T8] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 967.694921][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.708504][T16952] syzkaller0: entered allmulticast mode [ 967.715548][ T8] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 967.741013][ T8] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 967.749021][ T8] usb 9-1: Manufacturer: syz [ 967.769268][ T5988] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 967.842192][T16963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.506111][ T8] usb 9-1: config 0 descriptor?? [ 969.059327][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 969.074440][ T5988] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.119967][T16967] xt_CT: No such helper "syz0" [ 969.130824][ T5988] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 969.167400][ T5988] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 969.193894][ T8] rc_core: IR keymap rc-hauppauge not found [ 969.200928][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.205271][ T8] Registered IR keymap rc-empty [ 969.229414][ T5988] usb 4-1: Product: syz [ 969.233733][ T5988] usb 4-1: Manufacturer: syz [ 969.238341][ T5988] usb 4-1: SerialNumber: syz [ 969.255394][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 969.316998][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 969.375026][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 969.627144][ T5988] usb 4-1: 0:2 : does not exist [ 969.876157][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 969.922047][ T5988] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 969.933019][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 970.031756][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 970.553035][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 970.624922][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 970.888366][ T5988] usb 4-1: USB disconnect, device number 44 [ 970.939309][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 970.959410][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 971.002869][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 971.040626][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 971.083819][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 971.119375][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 971.163523][ T8] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 971.204872][ T8] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 971.262466][ T8] usb 9-1: USB disconnect, device number 7 [ 972.243000][T16876] udevd[16876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.289363][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 972.469670][ T5894] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 972.478146][ T5894] usb 2-1: config 0 has no interface number 0 [ 972.500476][ T5894] usb 2-1: config 0 interface 98 has no altsetting 0 [ 972.556531][ T5894] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 972.567201][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.629423][ T5894] usb 2-1: Product: syz [ 972.639938][ T5894] usb 2-1: Manufacturer: syz [ 972.644690][ T5894] usb 2-1: SerialNumber: syz [ 972.682757][ T5894] usb 2-1: config 0 descriptor?? [ 973.040993][ T5894] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 973.469418][ T5894] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 973.523013][ T5894] usb 2-1: device reset changed ep0 maxpacket size! [ 973.549431][ T5894] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 973.567337][ T5894] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 973.575923][ T8] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 973.594949][ T8] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 973.604007][ T5894] usb 2-1: USB disconnect, device number 10 [ 973.650330][ T8] ------------[ cut here ]------------ [ 973.660026][ T8] WARNING: CPU: 0 PID: 8 at fs/kernfs/dir.c:526 kernfs_new_node+0x1d8/0x240 [ 973.668744][ T8] Modules linked in: [ 973.672748][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 973.683021][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 973.693518][ T8] Workqueue: events request_firmware_work_func [ 973.700176][ T8] RIP: 0010:kernfs_new_node+0x1d8/0x240 [ 973.705875][ T8] Code: 74 08 48 89 ef e8 f8 40 c3 ff 48 89 5d 00 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 9b ad 09 e8 a9 d5 5c ff 90 <0f> 0b 90 eb a0 89 e9 80 e1 07 fe c1 38 c1 0f 8c 62 fe ff ff 48 89 [ 973.726096][ T8] RSP: 0018:ffffc900000d7558 EFLAGS: 00010293 [ 973.732626][ T8] RAX: ffffffff8242a557 RBX: ffff88814d0d7960 RCX: ffff88801cec5a00 [ 973.740844][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 973.749605][ T8] RBP: 0000000000000000 R08: ffffffff8242a4f4 R09: 1ffff11029a1af2c [ 973.758413][ T8] R10: dffffc0000000000 R11: ffffed1029a1af2d R12: 00000000000041ed [ 973.766869][ T8] R13: 0000000000000000 R14: ffff88804c014780 R15: dffffc0000000000 [ 973.774932][ T8] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 973.783944][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 973.790632][ T8] CR2: 00007f01dfacaafd CR3: 0000000032e80000 CR4: 0000000000350ef0 [ 973.798634][ T8] Call Trace: [ 973.802003][ T8] [ 973.804953][ T8] ? __warn+0x165/0x4d0 [ 973.809140][ T8] ? kernfs_new_node+0x1d8/0x240 [ 973.814217][ T8] ? report_bug+0x2b3/0x500 [ 973.818752][ T8] ? kernfs_new_node+0x1d8/0x240 [ 973.823790][ T8] ? handle_bug+0x60/0x90 [ 973.828149][ T8] ? exc_invalid_op+0x1a/0x50 [ 973.833136][ T8] ? asm_exc_invalid_op+0x1a/0x20 [ 973.838203][ T8] ? kernfs_new_node+0x174/0x240 [ 973.843258][ T8] ? kernfs_new_node+0x1d7/0x240 [ 973.848232][ T8] ? kernfs_new_node+0x1d8/0x240 [ 973.853553][ T8] ? kernfs_new_node+0x1d7/0x240 [ 973.858963][ T8] kernfs_create_dir_ns+0x43/0x120 [ 973.864228][ T8] sysfs_create_dir_ns+0x189/0x3a0 [ 973.869490][ T8] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 973.875149][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.880958][ T8] kobject_add_internal+0x435/0x8d0 [ 973.886199][ T8] kobject_add+0x152/0x220 [ 973.890694][ T8] ? __pfx_kobject_add+0x10/0x10 [ 973.895667][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.901462][ T8] ? __kasan_kmalloc+0x98/0xb0 [ 973.906265][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.912026][ T8] ? kobject_init+0x83/0x1f0 [ 973.916652][ T8] get_device_parent+0x391/0x410 [ 973.921742][ T8] device_add+0x325/0xbf0 [ 973.926102][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.931989][ T8] ? fw_create_instance+0xd2/0x180 [ 973.937256][ T8] firmware_fallback_sysfs+0x307/0x9e0 [ 973.943025][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.948699][ T8] _request_firmware+0xe44/0x1430 [ 973.949625][ T1543] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 973.954068][ T8] ? __pfx__request_firmware+0x10/0x10 [ 973.967474][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.973205][ T8] request_firmware_work_func+0x12a/0x280 [ 973.978965][ T8] ? __pfx_request_firmware_work_func+0x10/0x10 [ 973.985340][ T8] ? process_scheduled_works+0x976/0x1840 [ 973.991173][ T8] process_scheduled_works+0xa68/0x1840 [ 973.996783][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 974.002866][ T8] ? assign_work+0x364/0x3d0 [ 974.007492][ T8] worker_thread+0x870/0xd30 [ 974.012242][ T8] ? __kthread_parkme+0x169/0x1d0 [ 974.017304][ T8] ? __pfx_worker_thread+0x10/0x10 [ 974.022515][ T8] kthread+0x2f2/0x390 [ 974.026626][ T8] ? __pfx_worker_thread+0x10/0x10 [ 974.031830][ T8] ? __pfx_kthread+0x10/0x10 [ 974.036456][ T8] ret_from_fork+0x4d/0x80 [ 974.041053][ T8] ? __pfx_kthread+0x10/0x10 [ 974.045681][ T8] ret_from_fork_asm+0x1a/0x30 [ 974.050655][ T8] [ 974.053717][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 974.061027][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 974.071205][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 974.081270][ T8] Workqueue: events request_firmware_work_func [ 974.087452][ T8] Call Trace: [ 974.090734][ T8] [ 974.093667][ T8] dump_stack_lvl+0x241/0x360 [ 974.098363][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.103579][ T8] ? __pfx__printk+0x10/0x10 [ 974.108195][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.113856][ T8] ? vscnprintf+0x5d/0x90 [ 974.118211][ T8] panic+0x349/0x880 [ 974.122122][ T8] ? __warn+0x174/0x4d0 [ 974.126291][ T8] ? __pfx_panic+0x10/0x10 [ 974.130815][ T8] ? ret_from_fork_asm+0x1a/0x30 [ 974.135762][ T8] __warn+0x344/0x4d0 [ 974.139753][ T8] ? kernfs_new_node+0x1d8/0x240 [ 974.144703][ T8] report_bug+0x2b3/0x500 [ 974.149045][ T8] ? kernfs_new_node+0x1d8/0x240 [ 974.153998][ T8] handle_bug+0x60/0x90 [ 974.158162][ T8] exc_invalid_op+0x1a/0x50 [ 974.162679][ T8] asm_exc_invalid_op+0x1a/0x20 [ 974.167535][ T8] RIP: 0010:kernfs_new_node+0x1d8/0x240 [ 974.173091][ T8] Code: 74 08 48 89 ef e8 f8 40 c3 ff 48 89 5d 00 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 9b ad 09 e8 a9 d5 5c ff 90 <0f> 0b 90 eb a0 89 e9 80 e1 07 fe c1 38 c1 0f 8c 62 fe ff ff 48 89 [ 974.192700][ T8] RSP: 0018:ffffc900000d7558 EFLAGS: 00010293 [ 974.198775][ T8] RAX: ffffffff8242a557 RBX: ffff88814d0d7960 RCX: ffff88801cec5a00 [ 974.206749][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 974.214722][ T8] RBP: 0000000000000000 R08: ffffffff8242a4f4 R09: 1ffff11029a1af2c [ 974.222698][ T8] R10: dffffc0000000000 R11: ffffed1029a1af2d R12: 00000000000041ed [ 974.230674][ T8] R13: 0000000000000000 R14: ffff88804c014780 R15: dffffc0000000000 [ 974.238656][ T8] ? kernfs_new_node+0x174/0x240 [ 974.243607][ T8] ? kernfs_new_node+0x1d7/0x240 [ 974.248568][ T8] ? kernfs_new_node+0x1d7/0x240 [ 974.253522][ T8] kernfs_create_dir_ns+0x43/0x120 [ 974.258651][ T8] sysfs_create_dir_ns+0x189/0x3a0 [ 974.263778][ T8] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 974.269419][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.275082][ T8] kobject_add_internal+0x435/0x8d0 [ 974.280298][ T8] kobject_add+0x152/0x220 [ 974.284730][ T8] ? __pfx_kobject_add+0x10/0x10 [ 974.289678][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.295317][ T8] ? __kasan_kmalloc+0x98/0xb0 [ 974.300091][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.305729][ T8] ? kobject_init+0x83/0x1f0 [ 974.310328][ T8] get_device_parent+0x391/0x410 [ 974.315275][ T8] device_add+0x325/0xbf0 [ 974.319607][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.325246][ T8] ? fw_create_instance+0xd2/0x180 [ 974.330372][ T8] firmware_fallback_sysfs+0x307/0x9e0 [ 974.335846][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.341493][ T8] _request_firmware+0xe44/0x1430 [ 974.346541][ T8] ? __pfx__request_firmware+0x10/0x10 [ 974.352010][ T8] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.357658][ T8] request_firmware_work_func+0x12a/0x280 [ 974.363398][ T8] ? __pfx_request_firmware_work_func+0x10/0x10 [ 974.369664][ T8] ? process_scheduled_works+0x976/0x1840 [ 974.375391][ T8] process_scheduled_works+0xa68/0x1840 [ 974.380974][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 974.386969][ T8] ? assign_work+0x364/0x3d0 [ 974.391566][ T8] worker_thread+0x870/0xd30 [ 974.396169][ T8] ? __kthread_parkme+0x169/0x1d0 [ 974.401209][ T8] ? __pfx_worker_thread+0x10/0x10 [ 974.406325][ T8] kthread+0x2f2/0x390 [ 974.410407][ T8] ? __pfx_worker_thread+0x10/0x10 [ 974.415523][ T8] ? __pfx_kthread+0x10/0x10 [ 974.420126][ T8] ret_from_fork+0x4d/0x80 [ 974.424546][ T8] ? __pfx_kthread+0x10/0x10 [ 974.429148][ T8] ret_from_fork_asm+0x1a/0x30 [ 974.433939][ T8] [ 974.437176][ T8] Kernel Offset: disabled [ 974.441645][ T8] Rebooting in 86400 seconds..